{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:876dbd3c-5c97-53ec-bf69-3125d212d5f4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@angular/core", "purl": "pkg:npm/%40angular/core@18.2.14-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17", "version": "18.2.14-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-66035", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:b13f7a7f-99d6-5336-b36a-8c29b3920c7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2025-66412", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:fb7e5135-575f-53ca-a557-d07fbb90463e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-101895", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:eb9bd18d-7629-5a36-a12d-875dffce315b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-101895 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-101896", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a04678da-f829-5aa2-99c6-1153e7ed023e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-101896 affects version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-22610", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:fd5af9f3-cde0-5e71-9464-40d615d536a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-27970", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:e7c918a2-3c2f-5b84-bc88-7603d38e08a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-32635", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:6c98efcc-6b27-5eb0-8d3a-b9bd0e954c6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-32635 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-46417", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:5b440b4e-6896-5f1e-affd-ac1224db008f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-50168", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:b2e18795-f6ce-50e9-9444-7ae361099142", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-50169", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:881a1a6a-6cd8-56f5-afb4-c65c0e58d9f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-50170", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:3cb99d9e-c50c-5863-9d75-c81254c502d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-50171", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:aae115b4-0d01-5892-8f4d-734b756b07c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-50184", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:07007d1f-dae8-5d42-9132-88a4e2d6d182", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-50555", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:8a51c18e-abe5-5948-8ca4-f0fb18822602", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-50556", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:1f819e62-ebe0-59e2-b224-d04223b02f5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-50557", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:be864607-dd9d-509a-89b1-8d2098093581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-52725", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a4766115-396f-5850-8ab7-2a4e71fe7104", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-54264", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:2d6717e3-0c48-522c-a8f3-5a77248763e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-54265", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:00f4b708-29ac-5214-8a58-665b895bdb54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-54266", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:23f99626-4dcf-5704-8f7b-ec857c979d5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-54267", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:e93edf37-9718-598c-bbe1-297d209a301b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-54268", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:a044626d-3c99-56e1-965b-b6d4e3ec5dab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-68945", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:7362b1ee-fb8e-5d80-af21-cd40c2b9a9d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68945 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-69149", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:afea7a7a-5b9c-5c14-a1c2-d362b45fd0f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69149 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-69151", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:b3211336-5bf9-5a90-8372-f2e0df7afbf5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-69151 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-88056", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:140f8f2a-f21a-52d4-9c74-38649cb6b7f4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 18.2.14-tuxcare.17 of @angular/core. not_affected \u2014 The target version 18.2.14-tuxcare.13 is NOT affected by CVE-2026-88056. The vulnerable code pattern (calling String.prototype.trim() on URL strings before resolution) was never present in this version. The target uses a refactored parseUrl() implementation introduced via commit 49a60f6045 (May 2026) that correctly handles Unicode whitespace by percent-encoding it rather than stripping it, main...", "justification": "code_not_present" } }, { "id": "CVE-2026-88057", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:344cb057-9ec4-52e3-a561-5f2fcc27fc37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88057 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-88058", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:36b0c65b-4c19-5bb1-ad83-ae6c1af88bf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88058 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-88059", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:94c665ad-797a-5a5a-b8cc-7bda02c2ace4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88059 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } }, { "id": "CVE-2026-88060", "affects": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ], "bom-ref": "urn:uuid:8b38c76b-edca-5368-86a2-bc30d2ca14aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-88060 is fixed in version 18.2.14-tuxcare.17 of @angular/core." } } ], "dependencies": [ { "ref": "pkg:npm/%40angular/core@18.2.14-tuxcare.17" } ] }